← CVE Radar
CVE-2026-79941
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to script injection.
9.8 CRITICALEPSS 4.72%Not in KEVNVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 5.3 | MEDIUM | 3.1dell (CNA) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Details
- CVE ID
- CVE-2026-79941
- Status
- Analyzed
- Assigner (CNA)
- dell
- Published
- Sep 9, 2026
- Last modified
- 2026-09-11 13:18 UTC
- Weaknesses
- CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')
Affected Products
As published by the CNA in the CVE record.
DellSecure Connect Gateway 5.0 - Application1 version range
- before 5.36.00.00 or later
DellSecure Connect Gateway 5.0 - Appliance1 version range
- before 5.36.00.16 or later